$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft File: E1-CL_RWQDka60bEN1QQAmBpOlc.mft (raw, json) Hash identifier: 1jMQZv9Y5nRa5Exiwfw20Be5sCN8pCgm2sW+GD8KK0k= Subject key identifier: 3F:6F:3F:DA:3C:C4:B1:28:45:C6:F3:4E:C4:48:60:A6:AA:A3:B3:AC Authority key identifier: 13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57 Certificate issuer: /CN=A91C9484/serialNumber=135F822FF45640391AEB46C43754100260693A57 Certificate serial: 2442 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft Manifest number: 2442 Signing time: Tue 14 May 2024 14:54:38 +0000 Manifest this update: Tue 14 May 2024 14:54:38 +0000 Manifest next update: Tue 21 May 2024 14:54:38 +0000 Files and hashes: 1: E1-CL_RWQDka60bEN1QQAmBpOlc.crl (hash: wYKctASd/t9yHrU9zwryBri292kguaVC6PzrZ+/KNv4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9282 (0x2442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484/serialNumber=135F822FF45640391AEB46C43754100260693A57 Validity Not Before: May 14 14:54:38 2024 GMT Not After : May 21 14:54:38 2024 GMT Subject: CN=66437b2e-7028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:15:d6:aa:d1:51:78:2f:20:ad:3d:8a:bc:5b: 2a:22:56:58:4a:f5:be:0a:39:3a:db:57:18:f8:e9: 7d:07:54:45:5a:8d:67:ae:9c:bc:b4:b7:56:32:44: d1:44:57:f5:65:65:50:8d:09:68:91:a4:67:63:4c: 4f:d2:89:70:12:45:4f:df:2e:5a:da:a5:ee:c6:b9: 73:fb:06:2d:3d:5c:46:1a:09:c6:f3:4f:6e:16:17: 77:29:d6:5f:ac:9e:52:fa:fb:4c:61:24:98:df:2c: 92:ce:1b:1e:c7:9a:dc:31:3f:10:da:72:5d:bc:54: ab:0b:af:ec:25:cc:c4:43:37:f9:82:48:ab:aa:be: 26:86:7e:67:2b:1e:6d:89:ee:f4:61:c1:42:e8:3c: cf:2d:c1:aa:b7:5e:1d:ac:f8:a2:82:e6:c2:1c:74: ef:34:2d:df:30:dd:5e:d4:c3:33:9d:8c:60:d1:92: 89:8f:21:6a:0b:2f:7f:b7:a7:eb:43:70:53:35:c5: 25:84:72:a8:58:62:2e:f1:5f:0c:3f:2f:fb:16:3e: f8:4d:bd:1c:a4:8c:f4:0e:f5:42:2a:ff:a9:5b:cc: c0:91:69:10:f7:78:9d:1c:35:19:6a:c8:98:cd:ea: b4:8f:9c:1b:35:bd:24:99:85:83:e2:3b:ae:91:4b: d7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6F:3F:DA:3C:C4:B1:28:45:C6:F3:4E:C4:48:60:A6:AA:A3:B3:AC X509v3 Authority Key Identifier: keyid:13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:2a:b4:b8:f8:e4:a5:8a:c6:6a:ae:b2:1e:60:4d:d7:bf:40: 57:1a:77:96:e2:87:6a:5a:68:fc:33:12:8f:c9:46:f6:6c:8f: 8e:15:ca:9c:1c:40:3a:71:4e:f8:23:e7:8a:15:cd:15:c9:a8: 3a:cf:ed:a8:52:3d:29:dd:f5:6a:86:40:8b:58:63:ad:c4:46: d4:fb:14:c4:a5:3b:2b:45:1d:b6:61:80:3e:7c:f3:63:ed:86: 45:d2:57:ce:16:b1:ef:4a:83:53:9a:d6:e6:bd:08:64:48:82: c9:5b:43:36:32:cd:f9:b5:0e:56:5a:db:61:5b:bf:a9:92:6e: a3:bf:d6:a9:53:ce:58:0e:5f:a2:6e:bf:4d:0e:17:71:85:53: 7e:b1:89:66:54:bc:c8:b4:eb:f4:3e:b0:24:61:f6:c4:89:d2: 0f:f6:0e:c9:18:a1:83:cd:c5:bb:f1:8f:f7:c4:52:e6:69:4f: 35:a1:70:49:49:03:a9:3e:a6:41:d5:5f:a5:3b:8b:8c:09:ac: 54:f7:8e:16:50:83:4b:3f:bd:f3:c1:26:6e:55:26:6f:18:cf: d0:69:9f:50:c8:6a:72:05:ba:1f:32:41:f7:5e:0d:1f:f5:07: 81:42:ef:71:87:4c:b8:39:03:06:d2:1d:f2:2a:46:19:a2:3e: d3:24:7a:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKDEzNUY4MjJGRjQ1NjQwMzkxQUVCNDZDNDM3NTQxMDAy NjA2OTNBNTcwHhcNMjQwNTE0MTQ1NDM4WhcNMjQwNTIxMTQ1NDM4WjAYMRYwFAYD VQQDEw02NjQzN2IyZS03MDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRXWqtFReC8grT2KvFsqIlZYSvW+Cjk621cY+Ol9B1RFWo1nrpy8tLdWMkTR RFf1ZWVQjQlokaRnY0xP0olwEkVP3y5a2qXuxrlz+wYtPVxGGgnG809uFhd3KdZf rJ5S+vtMYSSY3yySzhsex5rcMT8Q2nJdvFSrC6/sJczEQzf5gkirqr4mhn5nKx5t ie70YcFC6DzPLcGqt14drPiigubCHHTvNC3fMN1e1MMznYxg0ZKJjyFqCy9/t6fr Q3BTNcUlhHKoWGIu8V8MPy/7Fj74Tb0cpIz0DvVCKv+pW8zAkWkQ93idHDUZasiY zeq0j5wbNb0kmYWD4juukUvXfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD9vP9o8 xLEoRcbzTsRIYKaqo7OsMB8GA1UdIwQYMBaAFBNfgi/0VkA5GutGxDdUEAJgaTpX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC8wQTBGODVGQzI5 MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FEa2E2MGJFTjFRUUFtQnBP bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0UxLUNMX1JXUURrYTYwYkVOMVFRQW1CcE9sYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQ4NC8wQTBGODVGQzI5MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FE a2E2MGJFTjFRUUFtQnBPbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVKrS4+OSlisZqrrIeYE3Xv0BXGneW4odqWmj8MxKPyUb2bI+OFcqc HEA6cU74I+eKFc0Vyag6z+2oUj0p3fVqhkCLWGOtxEbU+xTEpTsrRR22YYA+fPNj 7YZF0lfOFrHvSoNTmtbmvQhkSILJW0M2Ms35tQ5WWtthW7+pkm6jv9apU85YDl+i br9NDhdxhVN+sYlmVLzItOv0PrAkYfbEidIP9g7JGKGDzcW78Y/3xFLmaU81oXBJ SQOpPqZB1V+lO4uMCaxU944WUINLP73zwSZuVSZvGM/QaZ9QyGpyBbofMkH3Xg0f 9QeBQu9xh0y4OQMG0h3yKkYZoj7TJHpr -----END CERTIFICATE-----Generated at Tue May 14 16:25:26 2024 by rpki-client on console-ams.rpki-client.org